CVE-2026-86128
A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted IPv6 packet.
- Published Sep 30, 2026
- CVSS 8.2 high
- 0.4% chance of exploitation in the next 30 days (EPSS)